The security extension plugin is an all-in-one security solution for Alibaba Cloud Workspace Enterprise Edition. It helps you meet diverse security needs for your cloud computers by integrating curated third-party security services, such as cloud firewalls, user behavior management, data protection, and antivirus. This solution uses a virtual network bridge for unified management, enabling out-of-the-box, one-click deployment, and full lifecycle management of plugins. This topic describes how to deploy plugins in Alibaba Cloud Workspace using a virtual network bridge.
Prerequisites
You have created an advanced office network. Basic office networks do not support this deployment method.
You have created resources such as a cloud computer in the office network and assigned users. You must access the plugin from a cloud resource within this office network.
Procedure
Enable virtual network bridge
Log on to the Alibaba Cloud Workspace console.
In the left-side navigation pane, choose Security Center > security extension plugin.
In the top navigation bar, select a Region.
On the Security extension plugin page, click Activate virtual network bridge. On the page that opens, configure the following parameters and click Pay.
Select office network: You must select an advanced office network.
NoteVirtual network bridges are not supported for basic office networks.
Tier:
Pro: Supports plugins such as Panabit and ABT Networks.
Ultra: Offers higher performance and supports all plugins.
NoteAfter the service is activated, you can upgrade the tier from Pro to Ultra. Downgrades are not supported.
Subscription Duration: The virtual network bridge supports only monthly subscriptions. The minimum subscription duration is one month.
Auto-renewal: The auto-renewal period is the same as the subscription duration you select. For example, if you select a subscription duration of six months and enable auto-renewal, the service is automatically renewed for six months upon expiration. After enabling auto-renewal, you can change the renewal period on the Resource Renewal page. To do so, navigate to Price>Renewal in the top navigation bar.
Coupon: You can apply a coupon. For more information, see Use and manage coupons.
Deploy a plugin
Before you deploy a plugin, contact the third-party service provider for technical support and a trial or official license to ensure an optimal experience.
In the plugin list, find the target plugin and click View Details on its card. You will be redirected to Alibaba Cloud Marketplace.
In the upper-right corner of the page, find the contact information for the third-party service provider.
In the plugin list, find the target plugin, click Deploy Service on its card, and then click OK. The plugin then deploys automatically. Some plugins require an authorization code during deployment. You can obtain the code from the third-party service provider.
NoteNetwork fluctuations during deployment may affect resources in the office network. Perform this operation during off-peak hours.
Some plugins offer a free trial period. Before deployment, contact the vendor to obtain a temporary or official license file.
An office network supports only one plugin. To replace a plugin, you must first uninstall the current one.
Use the plugin
After deployment, the plugin card appears in the Deployed Plugins section with a status of Deployed. You can then access the plugin console from a cloud resource within the office network.
On the plugin card, click View Default Password to view and copy the initial username and password. The default credentials expire and are hidden after 24 hours. Change the password immediately after your first login.
Log on to a cloud resource in the office network with the virtual network bridge. Use the Console Address displayed on the plugin card to access the plugin console.
Manage the plugin
After deploying a plugin, you can click the buttons on the plugin card to perform the following management operations:
These operations may cause network fluctuations. Perform them during off-peak hours.
Pause: If you temporarily do not need to use the plugin, you can pause it. When a plugin is paused, traffic no longer passes through it.
Recovery: Resumes a paused plugin.
Restart: If the system slows down, the service becomes unresponsive, or a temporary fault occurs, you can restart the plugin to restore service.
Stop and Uninstall: Use this option to terminate the plugin service if you no longer need it or want to install a different one.
Manage the virtual network bridge
After deploying the virtual network bridge, you can click the corresponding buttons on the right to perform the following management operations:
Renew: Before the virtual network bridge service expires, you can renew it to extend the service period. You can renew for 1 month, 6 months, 1 year, or 2 years.
Available Versions: If your current virtual network bridge is the Pro tier, you can upgrade it to the Ultra tier to support more plugins. The upgrade does not affect the service expiration date.
Stop Service: You cannot stop the service before it expires. This option becomes available for expired services that are not renewed.
Reactivate: Service and plugin data are retained for 15 days after expiration. During this period, you can renew the service to reactivate it with its previous configuration. After 15 days, the service and its data are automatically released and cannot be recovered.
NoteYou will receive a renewal reminder 15 days before the service expires. The expiration date will also appear in red.
Usage notes
Plugins cannot be managed across office networks or tenants.
After a plugin is deployed, it controls traffic for all cloud resources in the advanced office network. Operations that change the plugin status, such as deploying, pausing, restarting, stopping, or uninstalling, may cause network fluctuations. Perform these operations during off-peak hours.
An office network supports only one virtual network bridge, and a virtual network bridge supports only one plugin.
You cannot delete an advanced office network while its virtual network bridge service is active.